Lucene search
K

102 matches found

RedhatCVE
RedhatCVE
added 2026/06/05 7:39 p.m.7 views

CVE-2026-7563

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 5.3.10. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it...

4.3CVSS5.6AI score0.00042EPSS
Exploits0References1
CVE
CVE
added 2026/06/01 3:13 p.m.12 views

CVE-2026-42679

CVE-2026-42679 affects the WordPress plugin Classified Listing (versions

6.5CVSS5.8AI score0.00048EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/06/01 12:0 a.m.7 views

WordPress Plugin “Classified Listing” Path Traversal Vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...

6.5CVSS5.8AI score0.00048EPSS
Exploits0References1
NVD
NVD
added 2026/05/15 9:16 a.m.15 views

CVE-2026-7563

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 5.3.10. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it...

4.3CVSS0.00042EPSS
Exploits0References14
ATTACKERKB
ATTACKERKB
added 2026/05/15 8:27 a.m.4 views

CVE-2026-7563

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 5.3.10. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it...

4.3CVSS5.9AI score0.00042EPSS
Exploits0References15
EUVD
EUVD
added 2026/05/15 8:27 a.m.12 views

EUVD-2026-30519

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 5.3.10. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it...

4.3CVSS5.9AI score0.00042EPSS
Exploits0References14
CNNVD
CNNVD
added 2026/05/15 12:0 a.m.7 views

WordPress plugin Classified Listing – AI-Powered Classified ads & Business Directory Plugin 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

4.3CVSS5.9AI score0.00042EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/04/29 2:37 p.m.4 views

WordPress Classified Listing plugin <= 5.3.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by endy in WordPress Plugin Classified Listing versions = 5.3.8...

5.8AI score
Exploits0Affected Software1
Patchstack
Patchstack
added 2026/04/29 12:28 p.m.2 views

WordPress Classified Listing plugin <= 5.3.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Cruzer in WordPress Plugin Classified Listing versions = 5.3.8...

5.8AI score
Exploits0Affected Software1
NVD
NVD
added 2026/02/19 7:17 a.m.3 views

CVE-2025-12882

The Clasifico Listing plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.0. This is due to the plugin allowing users who are registering new accounts to set their own role by supplying the 'listinguserrole' parameter. This makes it possible for...

9.8CVSS0.00109EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/02/19 12:0 a.m.5 views

WordPress plugin Clasifico Listing 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There ar...

9.8CVSS5.8AI score0.00109EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/23 9:17 p.m.7 views

CVE-2025-69056

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e-plugins Hotel Listing hotel-listing allows Reflected XSS.This issue affects Hotel Listing: from n/a through = 1.4.0...

7.1CVSS5.4AI score0.00064EPSS
Exploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.3 views

CVE-2025-69185

Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hotel Listing: from n/a through = 1.4.2...

7.3CVSS0.0007EPSS
Exploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.2 views

CVE-2025-69056

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e-plugins Hotel Listing hotel-listing allows Reflected XSS.This issue affects Hotel Listing: from n/a through = 1.4.0...

7.1CVSS0.00064EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.16 views

CVE-2025-69185 WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hotel Listing: from n/a through = 1.4.2...

7.3CVSS0.0007EPSS
Exploits0References1
CVE
CVE
added 2026/01/22 4:52 p.m.7 views

CVE-2025-69185

The CVE-2025-69185 entry maps to a Missing Authorization / Broken Access Control vulnerability in the WordPress Hotel Listing plugin (versions

7.3CVSS5.4AI score0.0007EPSS
Exploits0References1
CVE
CVE
added 2026/01/22 4:52 p.m.7 views

CVE-2025-69056

CVE-2025-69056 is a Reflected XSS in the WordPress Hotel Listings plugin (hotel-listing) for Hotel Listing, affecting versions up to and including 1.4.0. Root cause: improper input neutralization during web page generation. Impact per sources: potential exposure of confidential/integrity/availabi...

7.1CVSS5.4AI score0.00064EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.3 views

CVE-2025-69056

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e-plugins Hotel Listing hotel-listing allows Reflected XSS.This issue affects Hotel Listing: from n/a through = 1.4.0...

7.1CVSS5.2AI score0.00064EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.2 views

CVE-2025-68059 WordPress Hotel Listing plugin <= 1.4.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in e-plugins Hotel Listing hotel-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hotel Listing: from n/a through = 1.4.2...

7.6CVSS5.9AI score0.0002EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.4 views

PT-2026-4074

Name of the Vulnerable Software and Affected Versions e-plugins Hotel Listing versions through 1.4.2 Description The software contains a missing authorization issue related to incorrectly configured access control security levels. This allows for exploitation of the system. Recommendations Update...

5.2AI score0.0002EPSS
Exploits0References3
Rows per page
Query Builder